Need help to find applications with SSO configured.

Question

In our tenant, I want to find the list of applications who have configured SSO, also want to know those applications who have not configured

Answer 1

Hi,

Graph API can be used to fetch the information.

https://graph.microsoft.com/v1.0/servicePrincipals?$filter=preferredSingleSignOnMode eq 'saml'&$select=appDisplayName,preferredSingleSignOnMode

https://learn.microsoft.com/en-us/graph/api/resources/serviceprincipal?view=graph-rest-1.0#properties

If the above suggestion helps, please click on 'Accept answer' and 'upvote' it.

Answer 2

Hello @D Kumar,

To list of applications have configured SSO, you can make use of below query:

https://graph.microsoft.com/v1.0/servicePrincipals?$filter=preferredSingleSignOnMode eq 'password' or preferredSingleSignOnMode eq 'saml' or preferredSingleSignOnMode eq 'oidc'&$select=displayName,preferredSingleSignOnMode, id, tags

The preferredSingleSignOnMode returns password, saml, notSupported, and oidc as values in the response. Hence to know which applications have configured SSO you need to include all kinds of SSO modes.

You can also determine whether the application is configured as SSO or not by fetching the tags:

• OAuth apps will have tags as WindowsAzureActiveDirectoryIntegratedApp
• Gallery SAML Apps will have tag as WindowsAzureActiveDirectoryGalleryApplicationPrimaryV1
• Non-Gallery SAML Apps will have tag as WindowsAzureActiveDirectoryCustomSingleSignOnApplication

The WindowsAzureActiveDirectoryIntegratedApp tag is common to all types of apps (like SAML and OAuth-based apps).

If preferredSingleSignOnMode is null, then the application is not configured with any SSO. But you have to check the tags to confirm whether SSO is enabled or not.

Reference:

servicePrincipal resource type - Microsoft Graph v1.0 | Microsoft Learn

Hope this helps!

---

If this answer was helpful, please click "Accept the answer" and mark Yes, as this can be beneficial to other community members.

If you have any other questions or still running into more issues, let me know in the "comments" and I would be happy to help you.